Description
Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jayson T Cote | OAuth Server | ≤ 4.5.1 | — |
Medium · 6.5
CVE-2026-97288
EUVD-2026-89929GHSA-8whj-mhq6-32ph
WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack